Hello IT Admins,
We have 2 TLS related advisories for Microsoft Windows listed below.
1. Windows Network TLS 1.2 Upgrades affecting on-prem provisioning
As part of good security practice, many IT admins are upgrading their Windows networks to support TLS 1.2 and deprecating the use of TLS 1.0 and 1.1. This upgrade can affect the processing of Studentnet's Cloudwork Identity Node(CwIN) located on your school premises.
Studentnet started observing CwIN operating issues yesterday(20/10/21) morning. The symptoms are that Cloudwork's on premises provisioning of accounts from your management system to your AD appears to fail to complete.
Studentnet is issuing this advisory to inform you of the issue. There are a variety of solutions depending upon the upgrade status of your various Windows components.
We'd like to discuss the options with you prior to implementing the most appropriate solution for your school. If you experience any difficulty with completion of your account provisioning we request you to please log a ticket on our help portal(here: support.studentnet.net) or by sending an email to firstname.lastname@example.org.
More information on the impact of upgrading to TLS 1.2 on a Windows network is available here:
2. Windows 11 clients unable to login to Office
Microsoft are enforcing a very hard implementation of TLS 1.3 in Windows 11. At the moment our Cloudwork infra-structure needs an upgrade to support TLS 1.3 but that upgrade will be very disruptive as it involves an entire re-start of our technology stack - something one does not do lightly especially at one of the busiest times of the year for schools.
We have a temporary fix for the problem...
For the moment users on Windows 11 will need to disable TLS 1.3.
This option is under Internet Options -> Advanced
It seems that windows 11's implementation of TLS 1.3 prevents Windows 11 from correctly talking to Cloudwork, however forcing it to use TLS 1.2 works.
We're working on a solution to this issue, however it will represent a fairly large infrastructure update to Cloudwork, and is unlikely to be completed before the Christmas break.
Once we have upgraded our infrastructure to support TLS 1.3 we will send out an advisory at which point those users that have implemented the above fix will need to undo it.
The Studentnet Team
PS: Remember to join our LinkedIn Group
Studentnet excited to announce that we have updated our support structure. For anyone that has worked with us - you know our responses are swift and we work with you to solve any issues!
If you need to contact our support team we have 4 ways:
1) Click the HELP button on the bottom right of https://studentnet.net/ pages.
2) Email us on email@example.com
3) Go to our help and knowledge base page
4) Tweet a Direct message to us - @studentnet Studentnet Team
We also plan to have a WEBINAR in the next few weeks on our launch of Version 41 - so watch this space!
Also please make sure you join our LINKEDIN GROUP.
All the best,
V40 New Features
TASS integration: The first version of TASS Sync Profiles is now available
Multi-email address flexibility: Email addresses have been reworked to allow users to have secondary email addresses
IP address blocking: A new feature has been added to the Authorization Rules allowing controlling service access based on IP address
Authorization Rules: More options have been added to control how Authorization Rules are applied
Dashboard: OpenID Connect IDP details can now be accessed in the dashboard
Dashboard-Messaging: Updated bulk message workflow to enable marking users as "Welcome message sent" once the bulk welcome has been delivered
Dashboard-MFA: A UI update now allows admins to to manually enter the Multifactor Secret on devices that can not scan QR Codes when implementing multifactor authenticator apps
Authentication: OpenID Connect authentication now supports username hinting and forced authentication
Password Policies: Improved Active Directory integration allowing Cloudwork to better support Fine Grained Password Policies in Active Directory
is pleased to advise that our latest version 39 is now available for
release and deployment at schools.
V39 is a major release implementing full integration of Adobe Cloud for the first time. V39 also represents the first stage of implementing our simpler, easier to use and more dynamic modern user interface.
Our objective with
this release was to start a new phase of integrations with the
systems and apps used in modern Australian schools. Look for further
integrations with JSTOR, TASS and Azure AD to come in 2021.
Please find below the V39 release notes.
V39 New Features
Modern UI: First stage in Cloudwork's journey to modernise the look of our Admin UI
Adobe Cloud: Automated account provisioning with Adobe Cloud
OpenID Connect: Administrators can control which attributes are available to OpenID Connect applications
Improved Admin permissions: New admin permissions have been added to control who can see or edit recovery information for users
Improvement: Bulk Welcome messages no longer get sent to suspended users unless a checkbox is enabled
Improvement: Single Sign On views now more accurately display some default settings
Improved Mobile App support: OpenID Connect Tokens include more data to support mobile apps such as DigiStorm and EnrolHQ
Fix: Fixed a bug in metadata generation when customising organisation name or description
Fix Google Classroom: Numerous fixes and improvements to Google Classroom syncing
Fix: Other minor bug fixes and improvements
new school implementations will be on to V39. Schools will be
scheduled to upgrade at an agreed time. Schools on releases prior to
V37 will require detailed conversion. To schedule your upgrade please
either lodge a support ticket or send an email to
STUDENTNET® - Make the Cloud Yours!
Information Desk firstname.lastname@example.org studentnet.id Tel +61 2 9281 1626
Suite 1, 89 Jones St Ultimo NSW 2007 Australia NOC +61 2 9281 3905
ABN:90 001 966 892
q Reduce, Reuse, Recycle | P Please consider the environment before printing this e-mail
Copyright © 2021 Studentnet®
Studentnet®, Cloudwork®, Make the Cloud yours®, The Studentnet® logo, and Isonet® are registered trade marks 796793, 1550282, 1480792, 799597, and 1022051, respectively of Studentnet. All other trademarks, trade names or company names referenced herein are used for identification purposes only and are the property of their respective owners.
Studentnet is a wholly owned subsidiary of Twin-K Computers Pty Ltd, ABN 90 001 966 892
Privacy Notice: You have received this email because you or your school are users of NextMail or Studentnet services. If you wish to unsubscribe from this list you can do so by either replying to this email requesting to be unsubscribed or by visiting the link at the bottom of this email. Thank You.
Thank you for your interest in Studentnet's Cloudwork and IdentiLab identity management solutions for school education.